Linux sudo vulnerability (CVE-2025-32463)

General News
,
1

A critical Linux vulnerability (CVE-2025-32463) in Sudo lets any local unprivileged user gain root via the --chroot (-R) option

:locked: Affects default configs on Ubuntu, Fedora & others — no Sudo rules needed
:hammer_and_wrench: Fix: Update to Sudo 1.9.17p1+ (no workarounds)
:eyes: CVSS: 9.8 (Critical)
[1]

  1. knoppix: "A critical Linux vulnerability (CVE-2025-32463) i…" - Mastodon ↩︎

2
1 Like
3

A post was merged into an existing topic: Yet another sudo priv esc

4

Duplicate of the thread @SkewedZeppelin linked. Please continue the discussion there.